Zum Inhalt springen.
Sympa Menü

it-securitynotifies - [IT-SecNots] [SECURITY] [DSA 5160-1] ntfs-3g security update

it-securitynotifies AT lists.piratenpartei.de

Betreff: Sicherheitsankündigungen

Listenarchiv

[IT-SecNots] [SECURITY] [DSA 5160-1] ntfs-3g security update


Chronologisch Thread  
    < Chronologisch >       < Thread >
  • From: Salvatore Bonaccorso <carnil AT debian.org>
  • To: debian-security-announce AT lists.debian.org
  • Subject: [IT-SecNots] [SECURITY] [DSA 5160-1] ntfs-3g security update
  • Date: Fri, 10 Jun 2022 21:19:00 +0000
  • Authentication-results: mail.piratenpartei.de; dkim=none; spf=none (mail.piratenpartei.de: domain of "bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org" has no SPF policy when checking 82.195.75.100) smtp.mailfrom="bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org"; dmarc=none
  • List-archive: https://lists.debian.org/msgid-search/E1nzm20-0001Wl-D2 AT seger.debian.org
  • List-id: <debian-security-announce.lists.debian.org>
  • List-url: <http://lists.debian.org/debian-security-announce/>
  • Old-dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; s=smtpauto.seger; h=Date:Message-Id:Subject:To:From:Reply-To:Cc:MIME-Version :Content-Type:Content-Transfer-Encoding:Content-ID:Content-Description: In-Reply-To:References; bh=h1DHcW0NfPKd2rMnlSpFUdiYELUb1Qb3frvZiGR3DIA=; b=vG aqD2gUo8etS0A2Q3mgE88BMXuRr2DOmEWM8cNRCnJeEUPj9ho0ovuqXvYsFmwzE03720/qD7NQqtY 2P370Xl8c8DVaGVjbX4Vu5TkrKmSKSu8RU4xD2ndCWkRTZNlp+ZPoHsGO+qxG0eie4v93ZUwEj5W9 dsyei1/Fg2TNk2MC2kgqOM7eYsaLAFPHJnteAWpaoL2DqloiM9mZ8rRPh1cfJwpTzGPeDI8+ve4ap vIr9CJTHuajAKqX7j7xWiwSjk1FWQI6t7AvyeikA14N0LXgOMwgsg5AG8tGZp2//zNuVndfzQPwu/ +YLVBP8t73F+tzkov7vnsws4qrS7V5Mg==;
  • Old-return-path: <carnil AT seger.debian.org>
  • Priority: urgent
  • Resent-date: Fri, 10 Jun 2022 21:19:19 +0000 (UTC)
  • Resent-from: debian-security-announce AT lists.debian.org
  • Resent-message-id: <2AL7PgHE4RB.A.NvB.XV7oiB@bendel>
  • Resent-sender: debian-security-announce-request AT lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-5160-1 security AT debian.org
https://www.debian.org/security/ Salvatore Bonaccorso
June 10, 2022 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : ntfs-3g
CVE ID : CVE-2021-46790 CVE-2022-30783 CVE-2022-30784 CVE-2022-30785
CVE-2022-30786 CVE-2022-30787 CVE-2022-30788 CVE-2022-30789
Debian Bug : 1011770

Several vulnerabilities were discovered in NTFS-3G, a read-write NTFS
driver for FUSE. A local user can take advantage of these flaws for
local root privilege escalation.

For the oldstable distribution (buster), these problems have been fixed
in version 1:2017.3.23AR.3-3+deb10u2.

For the stable distribution (bullseye), these problems have been fixed in
version 1:2017.3.23AR.3-4+deb11u2.

We recommend that you upgrade your ntfs-3g packages.

For the detailed security status of ntfs-3g please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/ntfs-3g

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=QNTr
-----END PGP SIGNATURE-----


  • [IT-SecNots] [SECURITY] [DSA 5160-1] ntfs-3g security update, Salvatore Bonaccorso, 10.06.2022

Archiv bereitgestellt durch MHonArc 2.6.24.

Seitenanfang